# Set the port block size to 256.
[Sysname-nat-address-group-1] port-block block-size 256
[Sysname-nat-address-group-1] quit
# Configure DS-Lite NAT444 on GigabitEthernet 2/0/1 to use address group 1 to translate packets
permitted by ACL 2100.
[Sysname] interface ethernet 2/0/1
[Sysname-GigabitEthernet2/0/1] nat outbound ds-lite-b4 2100 address-group 1
Related commands
display nat outbound
nat outbound port-block-group
Use nat outbound port-block-group to apply a port block group to the outbound direction of an
interface.
Use undo nat outbound port-block-group to remove a port block group application.
Syntax
nat outbound port-block-group group-number
undo nat outbound port-block-group group-number
Default
No port block group is applied to an interface.
Views
Interface view
Predefined user roles
network-admin
Parameters
group-number: Specifies a port block group by its ID. The value range for this argument is 0 to 65535.
Usage guidelines
You can apply multiple port block groups to one interface.
After you apply a port block group to an interface, the system automatically computes the NAT444
mappings and creates entries for them. When a private IP address accesses the public network, the
private IP address is translated to the mapped public IP address, and the ports are translated to ports in
the selected port block.
Examples
# Apply port block group 1 to the outbound direction of GigabitEthernet 2/0/1.
<Sysname> system-view
[Sysname] interface gigabitethernet 2/0/1
[Sysname-GigabitEthernet2/0/1] nat outbound port-block-group 1
Related commands
display nat all
•
display nat outbound port-block-group
•
•
display nat port-block
221